rnacentral-skill

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
scripts/rest_request.py

The code is a legitimate generic HTTP fetching and response summarization utility, with no clear evidence of intentional malware or obfuscation. However, its unrestricted user-controlled URL, absolute-URL bypass, forwarded headers, and unrestricted raw output path create significant security risks in an exposed service. Restrict schemes and destinations, block private/link-local networks as appropriate, validate redirects, filter sensitive headers, and constrain raw_output_path to a safe directory.

Confidence: 98%Severity: 78%
Audit Metadata
Analyzed At
Sep 20, 2026, 12:21 PM
Package URL
pkg:socket/skills-sh/openai%2Fplugins%2Frnacentral-skill%2F@c5c422d97394c154303c7de13d9c44f1de5bb114cabcbe80cc10f7cdce930c83
Security Audit — socket — rnacentral-skill